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DETAILED ACTION 
Specification 

1 . The disclosure is objected to because of the following informalities: 

In various locations, the specification refers to "proxying components 12,14" and 
"server component 12" and "agent component 14" and there is no explanation as to the 
relation between a server component and the agent component in regards to being 
proxying components. They both have the same reference numbers, but are labeled 
differently. 

Appropriate correction is required. 

Claim Rejections - 35 USC § 102 

2. The following is a quotation of the appropriate paragraphs of 35 U.S.C. 102 that 
form the basis for the rejections under this section made in this Office action: 

A person shall be entitled to a patent unless - 

(e) the invention was described in (1) an application for patent, published under section 122(b), by 
another filed in the United States before the invention by the applicant for patent or (2) a patent 
granted on an application for patent by another filed in the United States before the invention by the 
applicant for patent, except that an international application filed under the treaty defined in section 
351 (a) shall have the effects for purposes of this subsection of an application filed in the United States 
only if the international application designated the United States and was published under Article 21(2) 
of such treaty in the English language. 

3. Claims 1-29 are rejected under 35 U.S.C. 102(e) as being anticipated by 
Gilbrech et al. 

As per claim 1, it is disclosed by Gilbrech et al of a method comprising sending a 
packet originating from a source (device) across the Internet (public network) to a 
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receiving VPN Unit (first network component) to establish a connection between the 
source (device) and a LAN (private network)(col. 4, lines 3-7; col. 8, lines 29-55; and as 
shown in Figures 2 & 5). It is determined if the communications from the device 
conform to authentication (authorization) rules to connect with the LAN and if so, the 
VPN Unit (first network component) establishes the connection with the destination (col. 
2, lines 57-67 & col. 8, lines 17-26). The request is then forwarded from the VPN Unit 
(first network component) to the router (second network component)(col. 8, lines 52-55 
& as shown in Figures 2 & 5). The router (second network component) creates and 
establishes the connection between the LAN (private network) and source (device) via 
the VPN Unit (first network component)(col. 9, line 55 through col. 10, line 10 & as 
shown in Figures 2 & 5). The examiner notes that routers are known as devices that 
receive transmitted messages and forward them to their correct destination, namely the 
LAN (private network) in light of the teachings of Gilbrech (as shown in Figures 2 & 5). 

As per claims 2 and 1 1 , Gilbrech et al discloses of forwarding a request from the 
VPN Unit (first network component) to the router (second network component)(col. 8, 
lines 52-55 & as shown in Figures 2 & 5). The router (second network component) 
creates and establishes the connection between the LAN (private network) and source 
(device) via the VPN Unit (first network component)(col. 9, line 55 through col. 10, line 
10 & as shown in Figures 2 & 5). The examiner is interpreting the connection between 
the source (device), router (second network component), and device(s) on the LAN 
(private network) to remain active as long as the devices maintain communications with 
one another and that the connection is temporary until terminated. 
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As per claims 3 and 12, Gilbrech et al discloses of determining if the 
communications from the device conform with authentication rules to connect with the 
LAN and if so, the VPN Unit (first network component) establishes the connection with 
the destination and if request is not from a recognized member of the VPN group, the 
packets are discarded (denying the device access)(col. 2, lines 57-67 & col. 8, lines 12- 
27). 

As per claims 4 and 13, it is taught by Gilbrech et al that a firewall (security 
component) separates the LAN (private network) from the Internet (col. 9, lines 23-35 & 
as shown in Figure 2). 

As per claims 5,6,14,15,25, and 26, it is disclosed by Gilbrech et al of a method 
comprising sending a packet originating from a source (device) across the Internet 
(public network) to a receiving VPN Unit (first network component) to establish a 
connection between the source (device) and a LAN (private network)(col. 4, lines 3-7; 
col. 8, lines 29-55; and as shown in Figures 2 & 5). It is determined if the 
communications from the device conform to authentication (authorization) rules to 
connect with the LAN and if so, the VPN Unit (first network component) establishes the 
connection with the destination (col. 2, lines 57-67 & col. 8, lines 17-26). The request is 
then forwarded from the VPN Unit (first network component) to the router (second 
network component)(col. 8, lines 52-55 & as shown in Figures 2 & 5). The router 
(second network component) creates and establishes the connection between the LAN 
(private network) and source (device) via the VPN Unit (first network component)(col. 9, 
line 55 through col. 10, line 10 & as shown in Figures 2 & 5). The examiner is 
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interpreting the connection between the source (device), VPN Unit (first network 
component), and router (second network component) to remain active as long as the 
devices maintain communications with one another unless if that connection is 
terminated by any or all of the devices. 

As per claims 7 and 16, Gilbrech et al discloses of determining if the 
communications from the device conform to authentication rules to connect with the 
LAN and if so, the VPN Unit (first network component) establishes the connection with 
the destination (col. 2, lines 57-67 & col. 8, lines 17-26). The examiner is interpreting 
the authentication rules to include a password since passwords are generally used for 
authentication. 

As per claims 8, 17, and 23, it is recited by the teachings of Gilbrech et al that the 
public network includes the Internet (col. 2, lines 43-46). 

As per claims 9 and 18, Gilbrech et al teaches of determining if the 
communications from the device conform to authentication (authorization) rules to 
connect with the LAN and if so, the VPN Unit (first network component) establishes the 
connection with the destination (col. 2, lines 57-67 & col. 8, lines 17-26). The request is 
then forwarded from the VPN Unit (first network component) to the router (second 
network component)(col. 8, lines 52-55 & as shown in Figures 2 & 5). It is interpreted 
by the examiner that the VPN Unit (first network component) and router (second 
network component) are proxy servers since it is disclosed in the applicant's 
specification "Proxy servers can monitor and intercept any and all requests being sent 
to and/or received from the private network and/or the Internet. The proxying 
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components can also provide client-to-private-network encryption" as is recited on page 
7, lines 13-17. Gilbrech discloses of performing encryption services on the packets and 
shows how both the VPN Unit (first network component) and router (second network 
component) intercept communications since that is the only path into the LAN (private 
network)(col. 8, lines 19-26 & as shown in Figure 2). 

As per claim 10, it is disclosed by Gilbrech et al of a techniques (machine 
readable instructions stored on an article) for sending a packet originating from a source 
(device) across the Internet (public network) to a receiving VPN Unit (first network 
component) to establish a connection between the source (device) and a LAN (private 
network)(col. 1, lines 14-18; col. 4, lines 3-7; col. 8, lines 29-55; and as shown in 
Figures 2 & 5). It is determined if the communications from the device conform to 
authentication (authorization) rules to connect with the LAN and if so, the VPN Unit (first 
network component) establishes the connection with the destination (col. 2, lines 57-67 
& col. 8, lines 17-26). The request is then forwarded from the VPN Unit (first network 
component) to the router (second network component)(col. 8, lines 52-55 & as shown in 
Figures 2 & 5). The router (second network component) creates and establishes the 
connection between the LAN (private network) and source (device) via the VPN Unit 
(first network component)(col. 9, line 55 through col. 10, line 10 & as shown in Figures 2 
& 5). The examiner notes that routers are known as devices that receive transmitted 
messages and forward them to their correct destination, namely the LAN (private 
network) in light of the teachings of Gilbrech et al (as shown in Figures 2 & 5). 
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As per claim 19, it is disclosed by Gilbrech et al of a system for sending a packet 
originating from a source (device) across the Internet (public network) to a receiving 
VPN Unit (server component) to establish a connection between the source (device) 
and a LAN (private network)(col. 6, lines 38-41; col. 8, lines 29-55; and as shown in 
Figures 2 & 5). The VPN Unit (server component) establishes the connection with the 
destination (col. 2, lines 57-67 & col. 8, lines 17-26). It is taught by Gilbrech et al that a 
firewall (security component) separates the LAN (private network) from the Internet (col. 
9, lines 23-35 & as shown in Figure 2). The request is then forwarded from the VPN 
Unit (server component) to the router (agent)(col. 8, lines 52-55 & as shown in Figures 2 
& 5). The router (agent) creates and establishes the connection between the LAN 
(private network) and source (device) via the VPN Unit (server component)(col. 9, line 
55 through col. 10, line 10 & as shown in Figures 2 & 5). The examiner notes that 
routers are known as devices that receive transmitted messages and forward them to 
their correct destination, namely the LAN (private network) in light of the teachings of 
Gilbrech et al (as shown in Figures 2 & 5). 

As per claim 20, Gilbrech et al discloses of a router (agent) that creates and 
establishes the connection between the LAN (private network) and source (device) via 
the VPN Unit (server component)(col. 9, line 55 through col. 10, line 10 & as shown in 
Figures 2 & 5). The examiner notes that routers are known as devices that receive 
transmitted messages and forward them to their correct destination, namely the any 
devices within the LAN (private network) as is taught by Gilbrech et al (as shown in 
Figures 2 & 5). 
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As per claims 20 and 21 , Gilbrech et al teaches of forwarding a request from the 
VPN Unit (server component) to the router (agent)(col. 8, lines 52-55 & as shown in 
Figures 2 & 5). The router (agent) creates and establishes the connection (by providing 
access) between the LAN (private network) and source (device) via the VPN Unit 
(server component)(col. 9, line 55 through col. 10, line 10 & as shown in Figures 2 & 5). 
Figure 2 shows multiple devices connected to the LAN (private network). 

As per claim 22, it is disclosed by Gilbrech et al that communications are 
extensible to support any protocol used by the Internet (public network) and the LAN 
(private network)(col. 5, lines 57-61 & col. 6, lines 5-22). It is interpreted by the 
examiner that the VPN Unit (server component) and router (agent) handle the different 
protocols since they are connected across the Internet (public network) and LAN 
(private network)(as shown in Figures 2 & 5). 

As per claim 24, Gilbrech et al teaches of determining if the communications from 
the device conform to authentication rules to connect with the LAN and if so, the VPN 
Unit (server component) establishes the connection with the destination (col. 2, lines 57- 
67 & col. 8, lines 17-26). 

As per claims 27 and 29, Gilbrech et al teaches of determining if the 
communications from the device conform to authentication (authorization) rules to 
connect with the LAN and if so, the VPN Unit (server component) establishes the 
connection with the destination (col. 2, lines 57-67 & col. 8, lines 17-26). The request is 
then forwarded from the VPN Unit (server component) to the router (agent)(col. 8, lines 
52-55 & as shown in Figures 2 & 5). It is interpreted by the examiner that the VPN Unit 
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(server component) and router (agent) are proxy servers since it is disclosed in the 
applicant's specification "Proxy servers can monitor and intercept any and all requests 
being sent to and/or received from the private network and/or the Internet. The proxying 
components can also provide client-to-private-network encryption" as is recited on page 
7, lines 13-17. Gilbrech discloses of performing encryption services and authentication 
rules (security mechanisms) on the packets and shows how both the VPN Unit (server 
component) and router (agent) intercept communications since that is the only path into 
the LAN (private network)(col. 8, lines 19-26 & as shown in Figure 2). 

As per claim 28, it is shown in Figure 2 of Gilbrech et al the routers (agents) are 
implemented inside the LANs (private networks). 

Conclusion 

4. The prior art made of record and not relied upon is considered pertinent to 
applicant's disclosure. 

Hoke et al, U.S. Patent 6,701 ,437 discloses of a router and virtual private 
network unit that accept communication from the Internet destined for a LAN. 

Baize, U.S. Patent 6,317,838 discloses of accessing a private network across the 
Internet. 

Grantges, Jr., U.S. Patent 6,324,648 discloses of a secure gateway that uses 
proxies. 

Arrow et al, U.S. Patent 6,226,751 discloses of a router and virtual private 
network unit that accept communication from the Internet destined for a LAN. 
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Crichton et al, U.S. Patent 6,104,716 discloses of the uses of multiple proxies for 
establishing connections between private networks across the Internet. 

Wray, EP 1280300 A2 discloses of verifying external connections requesting 
access to LANs. 

5. Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Christopher A. Revak whose telephone number is 703- 
305-1843. The examiner can normally be reached on Monday-Friday, 6:30am-4:00pm. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Ayaz Sheikh can be reached on 703-305-9648. The fax phone number for 
the organization where this application or proceeding is assigned is 703-872-9306. 

Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). 
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